DRAFT — not yet reviewed or approved by counsel. Not in effect.
Last updated: 2026-11-14 (draft)
Cannoli Subprocessors
Third parties that process personal data on Cannoli's behalf, referenced as Annex III of the Data Processing Addendum (cannoli.ai/legal/dpa). Transcripts and notes are stored only on the customer's Mac; no party below stores them. In Managed mode, transcript text transits Cannoli's relay in memory and is processed by Anthropic. In Bring-your-own-key and Local-only modes, no subprocessor receives transcript text.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Anthropic, PBC | AI model inference for Managed mode | Transcript text and research-folder excerpts the user chooses to send; model output. Deleted within 30 days by default; not used for training (Commercial Terms, effective June 17, 2025, section B) | USA |
| Vercel Inc. | Website hosting, relay runtime, request logs, file storage for downloads | Account data in transit; Managed-mode text in memory only; request logs (IP address, user agent, timestamp), kept 30 days | USA; global edge network for static content |
| Neon, Inc. | Account database | Account email, name, organization, device records, subscription status, usage counts | USA |
| Stripe, Inc. | Payments, invoicing, tax | Billing contact details, payment card details (held by Stripe only), invoice history | USA |
| Resend | Transactional email: sign-in links, receipts | Email address and the content of those emails | USA |
Not a subprocessor, disclosed for completeness
Hugging Face, Inc. (USA). At first run the App downloads its on-device speaker-separation model file once from Hugging Face. That request reveals the device's IP address to Hugging Face and nothing else; no customer content or account data is processed. We plan to host the file on cannoli.ai instead.
Changes to this list
We give at least 15 days' notice before adding a subprocessor or materially changing one's role, by email to organization administrators and by updating this page. Customers may object within that period under section 8 of the DPA. To receive notices at another address, write to [PRIVACY EMAIL] (privacy@cannoli.ai).
Anthropic publishes its own subprocessors at anthropic.com/subprocessors and its security reports at trust.anthropic.com.